LPS-30443

Hey Julio, if you remember this was an attempt to move most of the logic from actions to service. It also contains some permission checking refactors and error message improvements.